Revision history [back]
- This looks to be a duplicate of https://ask.wireshark.org/question/12124/what-type-of-attack-is-this/ which includes a link to the pcap.
- The wikipedia entry is pretty good describing the attack types: https://en.wikipedia.org/wiki/IP_fragmentation_attack
- "ID of ping does not match ID of fragment": you're confusing the IP header Identification with the ICMP request Identifier.